If a email comes in that does not pass the RBL check (via spamhaus), it is immediately removed before it has a chance to go to spamassassin/clamav. The whitelist/blacklist in ISPConfig only really applies to spamassassin and what happens to emails after they pass the postfix checks (RBL checks).